ELSA-2026-2470

ELSA-2026-2470 - php:7.4 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-02-11

Description

libzip
[1.6.1-1]
- update to 1.6.1
- enable lzma support

php
[7.4.33-3]
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
- Fix libxml streams use wrong content-type header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of http stream wrapper does not handle folded headers
CVE-2025-1217
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
- Fix Null byte termination in dns_get_record()
GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
CVE-2025-14177

php-pear
[1:1.10.13-1]
- update PEAR to 1.10.13
- update Archive_Tar to 1.4.14

php-pecl-apcu
[5.1.18-1]
- update to 5.1.18

php-pecl-rrd
[2.0.1-1]
- build for RHEL 8

php-pecl-xdebug
[2.9.5-1]
- update to 2.9.5

php-pecl-zip
[1.18.2-1]
- update to 1.18.2

Related CVEs

CVE-2024-11233

CVE-2024-11234

CVE-2024-8929

CVE-2025-1217

CVE-2025-1219

CVE-2025-1220

CVE-2025-14177

CVE-2025-14178

CVE-2025-1734

CVE-2025-1735

CVE-2025-1736

CVE-2025-1861

CVE-2025-6491

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libzip-1.6.1-1.module+el8.10.0+90472+f810484b.src.rpm	1cbf7943d372890db4ffb853c5de1e94f21e432ce38d0dc203c402d9b11a1a50	-	ol8_aarch64_appstream
	php-7.4.33-3.module+el8.10.0+90781+f71ba651.src.rpm	83d2cbafb21e053ff9804cd3b4546f0786dc532feb110f59c1373ff1616c2931	-	ol8_aarch64_appstream
	php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.src.rpm	30aaabb79e9028650a3f199e5def8003a2c12bcc6430a9d16973bc219ae9475f	-	ol8_aarch64_appstream
	php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.src.rpm	4d6b3ab3d266701017e7bf271119cf7e54ac05689a1198f7b160a8a6b885a3aa	-	ol8_aarch64_appstream
	php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.src.rpm	4a75bb277e7804f2e5608a9b8dc75b665acc5694db2f0b1cbad64c34a3a73a79	-	ol8_aarch64_appstream
	php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.src.rpm	369ff57cb8c7393b5f11d95a411b2fea455c33bee31b02c802130ecb66f57994	-	ol8_aarch64_appstream
	php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.src.rpm	223ab292151f043c94601d7678365fe884c33ff65281ed2f56138ad93cae7eac	-	ol8_aarch64_appstream
	apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm	24cfe254b24aeef0a9c7299feacd85348aafa66c8394394e218cfc0502e280b3	-	ol8_aarch64_appstream
	libzip-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm	49d10a584dd1fe90ab03ecb1c67536bde7081b086cba125be5a74b401e7eedbd	-	ol8_aarch64_appstream
	libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm	1b5e5632eb90a3b8c6a6192da469629bd9d636f07a33a067a1fd619bedcbc27b	-	ol8_aarch64_appstream
	libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm	069b1b2cf958fac306912aedea484e8d632658b6f99aa8898c70c5603ee87db8	-	ol8_aarch64_appstream
	php-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	6afe931bbfbc90501444dfbaf856bb1b7784834c7af916ccb88cc5892793bf63	-	ol8_aarch64_appstream
	php-bcmath-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	3fa6d6ea77b0de1ebad01c5a1f6ae4973af30e40674ad3349177f2e6c6782bf3	-	ol8_aarch64_appstream
	php-cli-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	2e78a508a610ef6c502447bea986b12f5f6980f060b838ce694fc1094236429e	-	ol8_aarch64_appstream
	php-common-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	669e226c159994b76c8b597ff1598f0280314c49d18a1a46878415531455d88c	-	ol8_aarch64_appstream
	php-dba-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	589ea199c33681cb6d626478794002adef32c66d3f3505c0b2a42acc9e090950	-	ol8_aarch64_appstream
	php-dbg-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	c8461a20e0a66d33e35daa1f653641c3ff2d25ddf59d9f13654d337ea52cb3fd	-	ol8_aarch64_appstream
	php-devel-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	e8793d8a303607df64c61799eb56fbabce5cf8b3eb06fba8707351abc0f4ce84	-	ol8_aarch64_appstream
	php-embedded-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	9c67b59bd591938289f59c96c31d09808840f14d75fb2b509f22791a23c790df	-	ol8_aarch64_appstream
	php-enchant-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	92e3dee68a0d0ed46ac7d45288e499d6f067eabce7b8689e63c461825391524a	-	ol8_aarch64_appstream
	php-ffi-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	e4801b5cf8bd43c647fe3662380110f3b7220dda6abcd37deef5ac04bacc6561	-	ol8_aarch64_appstream
	php-fpm-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	cff98ea6ea2ca50062e72906f0facbd6aac7f397513a66c95b8b8426c2d02fb9	-	ol8_aarch64_appstream
	php-gd-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	6700bbb04cce762783f4f184f59eae8a686b47e9d14997c0b9dba6cf2111e835	-	ol8_aarch64_appstream
	php-gmp-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	de4ce67750b93d4907be2c8545c5f59ef1f119bd40d98f0c160fbaf4c886b38f	-	ol8_aarch64_appstream
	php-intl-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	fc21be96d59ec13f8d53b55242b74124f847bd9f6da71499182f8b6661ee3c10	-	ol8_aarch64_appstream
	php-json-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	ddd519734dbe370c0f66c0d6c6a5cac920f5cc2ed0ba34c2ba4384bed913b29d	-	ol8_aarch64_appstream
	php-ldap-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	f3cbe1250112ea3ed2089bb9886f4ae874685b53b03b253ad2ef8d7cb7a3c206	-	ol8_aarch64_appstream
	php-mbstring-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	47e8a6533a1f8cced22d3c0b93aa35089d70fe08a765e5967f8ad949d0cc602b	-	ol8_aarch64_appstream
	php-mysqlnd-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	aaabcb78617af4c6dbec88571577e4f98a67d71a090995674da1f3884a14009b	-	ol8_aarch64_appstream
	php-odbc-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	cd9c60f39ae88e0eb97c67d1426b92bc9e03d36849cb942fcc348d317ebdea35	-	ol8_aarch64_appstream
	php-opcache-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	e0aba4f613e5ee9c8c796ec31a170c14e3af236a73aa45a715f3412d65cd8db6	-	ol8_aarch64_appstream
	php-pdo-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	2d6d881364efcf3ded26e9761717bda1bf9a9b1c954d18abbdd150fd5452a63b	-	ol8_aarch64_appstream
	php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.noarch.rpm	c29ef837b826ee95be21b3ed3e3dc29a0e8d3845886f229a30cad736d45bba10	-	ol8_aarch64_appstream
	php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm	4607fd8c055608fa758666159ce172979a6a09bb1e9e031edb8e0e2f1b14569e	-	ol8_aarch64_appstream
	php-pecl-apcu-devel-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm	954bfaab09d7f626be93980f1d90df9a429b038403401232e6cf9a464b4fba41	-	ol8_aarch64_appstream
	php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm	fd03d788a2904a2be40a7169e6d1fd81eace6536ff8420b6de3a711f0f78d95a	-	ol8_aarch64_appstream
	php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.aarch64.rpm	8761fbb58b9b479fbeff1f8c82141740d82bcd724144a24279bd25077ff09071	-	ol8_aarch64_appstream
	php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.aarch64.rpm	aebf82bd3cf79e81c61beccc883ebdf1f31e2ef209bcc1214383faafe466e232	-	ol8_aarch64_appstream
	php-pgsql-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	c8c1b5e464cd7bad3394593daafe4f4e5d35dc1fb235ba63b4700e57a4542e80	-	ol8_aarch64_appstream
	php-process-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	b5dbbbdbacdebe9782d3e1d2fffed66015f70af6c6f5cce621af9bb43642fd52	-	ol8_aarch64_appstream
	php-snmp-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	4a6f07c5128bab7b394bfdc78e770ad246717757b4928b95e9c2c1ec8f7eb08a	-	ol8_aarch64_appstream
	php-soap-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	50bff9258ee8a358fc4df001a7e53c5e990563af5cd3b2e11262b8e22f8258e9	-	ol8_aarch64_appstream
	php-xml-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	d2b9f14fdf2d1bbfc3be96f560b6e85c71f910e497fd3a7c823803fdb1ff4483	-	ol8_aarch64_appstream
	php-xmlrpc-7.4.33-3.module+el8.10.0+90781+f71ba651.aarch64.rpm	963c7dabd50d6ed8d35b17b62de24a3e49f8ec59bf03c22fd3e0050571ecfd34	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	libzip-1.6.1-1.module+el8.10.0+90472+f810484b.src.rpm	1cbf7943d372890db4ffb853c5de1e94f21e432ce38d0dc203c402d9b11a1a50	-	ol8_x86_64_appstream
	php-7.4.33-3.module+el8.10.0+90781+f71ba651.src.rpm	83d2cbafb21e053ff9804cd3b4546f0786dc532feb110f59c1373ff1616c2931	-	ol8_x86_64_appstream
	php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.src.rpm	30aaabb79e9028650a3f199e5def8003a2c12bcc6430a9d16973bc219ae9475f	-	ol8_x86_64_appstream
	php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.src.rpm	4d6b3ab3d266701017e7bf271119cf7e54ac05689a1198f7b160a8a6b885a3aa	-	ol8_x86_64_appstream
	php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.src.rpm	4a75bb277e7804f2e5608a9b8dc75b665acc5694db2f0b1cbad64c34a3a73a79	-	ol8_x86_64_appstream
	php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.src.rpm	369ff57cb8c7393b5f11d95a411b2fea455c33bee31b02c802130ecb66f57994	-	ol8_x86_64_appstream
	php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.src.rpm	223ab292151f043c94601d7678365fe884c33ff65281ed2f56138ad93cae7eac	-	ol8_x86_64_appstream
	apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm	24cfe254b24aeef0a9c7299feacd85348aafa66c8394394e218cfc0502e280b3	-	ol8_x86_64_appstream
	libzip-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm	512f277dd9ff670d1ad2db2d4909270c787dcf6a9d6fa23b55e39990d79ddde3	-	ol8_x86_64_appstream
	libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm	e1f0205af0634f9aac53c761e2e0df7fd5523ce5412fa59bb26a22444b748f1f	-	ol8_x86_64_appstream
	libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm	f77c20844a0013b19b087e83cf9b066e3050743046240192541f01342c362fb9	-	ol8_x86_64_appstream
	php-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	a9ff20d4d81e43dbede14974cf6ca90d958a756dbc79c33e0f3f72ebbf155d19	-	ol8_x86_64_appstream
	php-bcmath-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	d258509b2d5226649d873562033dd5e958cda698f012560150a25c4b9ef19c55	-	ol8_x86_64_appstream
	php-cli-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	329168f5c789e50f1da189b8c6bcebe50f0aac2e6c5cf00e3ad7859b585a3d1b	-	ol8_x86_64_appstream
	php-common-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	b5e03ac30cb1bfa2eaeedfcabc1cfa8db377f3930eb92f13f5abd8d4d69f57eb	-	ol8_x86_64_appstream
	php-dba-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	80f63862b2ab87c2ab3d97ba784e3ceb0898a3c26eaa12e486a63e687f724783	-	ol8_x86_64_appstream
	php-dbg-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	1a404b986c650be2c33a018d314540a5acf755a80170e02403f04940c3d65114	-	ol8_x86_64_appstream
	php-devel-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	d4b45f8a211382fabf16c45801929b9b28315d3ea224dae6096a61738f2a9357	-	ol8_x86_64_appstream
	php-embedded-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	ce1a009addbfb88762c5fb91f8a7baab249547931297a2ee45175ceaf91a66f1	-	ol8_x86_64_appstream
	php-enchant-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	30f0ca6b4039bd957f9f2310fe0cdb40861aaff1f26c75d8ac044c780cfafc5a	-	ol8_x86_64_appstream
	php-ffi-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	e8f57f54809fd3c12899b3203faf06f7599457434cd1e590bc082cd00eb27fa3	-	ol8_x86_64_appstream
	php-fpm-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	5e12dba09742eefe5955d34b175d0d07a053a5cf606a38f613ecd7784cc320d6	-	ol8_x86_64_appstream
	php-gd-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	03e6510b708b4e4f5cdb2db5b9d24a25fcdad1a2d01696bbbcee375c94c5d570	-	ol8_x86_64_appstream
	php-gmp-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	5e52564b71f69fd50bee83014ffad6a0fde55131c8c014343466977856081f75	-	ol8_x86_64_appstream
	php-intl-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	1f2a7d8d89bccd491e87a7ccede0e3f237fa12b8daa85d2cf073f909d0225284	-	ol8_x86_64_appstream
	php-json-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	52ae906af39d74b2a8bbfaafbcfbe1a0c185084c0a3cb06c7e935484715ff765	-	ol8_x86_64_appstream
	php-ldap-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	ac813a750e8d96143747c8f3aca222ebe5429af1c28177184ba64b840bb686a4	-	ol8_x86_64_appstream
	php-mbstring-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	d2c17037f2a2caad7038a37ffcb828c888cbd2437b3098f15762d77d5db75e5d	-	ol8_x86_64_appstream
	php-mysqlnd-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	ce786cf17926fee4a6bdb45bee0d242627a5246cdd5e01b80b0c7913705985bb	-	ol8_x86_64_appstream
	php-odbc-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	7f22a1f0e05f141b5b8044b1f8e550173fe55a3ff90e8d4ce5e99fa26d0fb96c	-	ol8_x86_64_appstream
	php-opcache-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	14c1adbc6df5b691a3726c1b9f05d39c6bf262fe09454f7d819fda8977039809	-	ol8_x86_64_appstream
	php-pdo-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	725fd6cdbd80356bf00753f99d863d7262ad2b84ff37aab07b5882a3c014be8b	-	ol8_x86_64_appstream
	php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.noarch.rpm	c29ef837b826ee95be21b3ed3e3dc29a0e8d3845886f229a30cad736d45bba10	-	ol8_x86_64_appstream
	php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.x86_64.rpm	b5f6cb5fdf7b8dbd36beb7384aa181fdf1b827910fce9fe7a42911d9b15a4ac5	-	ol8_x86_64_appstream
	php-pecl-apcu-devel-5.1.18-1.module+el8.10.0+90472+f810484b.x86_64.rpm	ffffc9e070d025b188a30d531ea83ba95c9f9ae5d411b15970b7e5833635c633	-	ol8_x86_64_appstream
	php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm	5bba3c685327322104ad7bc3700d3615e3dd308ed52fd36caaaa346df7766f21	-	ol8_x86_64_appstream
	php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.x86_64.rpm	2b7b94939e8cad90fe73fd2924cfbdc17ba7b7c8465b70c7a60e5a59acc3839b	-	ol8_x86_64_appstream
	php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.x86_64.rpm	2a767241d71b30859e14834d6c9cefc4667d5c9189ccb6e4dee5e653703585fd	-	ol8_x86_64_appstream
	php-pgsql-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	dc467a70fd7eeb00b52f312ce9049551e7e6c581788a4b2bdfa1671b6e27db13	-	ol8_x86_64_appstream
	php-process-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	4b8b3d0381467e6752d61487a596eeb1426fd404bdb5211f0af4b5a6e081c7c1	-	ol8_x86_64_appstream
	php-snmp-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	3e4dee57cbf0eddd5c5bd7093713950d9d846aac48e2fc9dd136f3ac45757588	-	ol8_x86_64_appstream
	php-soap-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	9833207e8599e13f85426226833b48dbdb53a99a98003b6c9c80338d5b061048	-	ol8_x86_64_appstream
	php-xml-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	198f36031df19626ce9a9d5737f98f14428a6c57811cd6bf5ba88efca8b9f5eb	-	ol8_x86_64_appstream
	php-xmlrpc-7.4.33-3.module+el8.10.0+90781+f71ba651.x86_64.rpm	297b8c36ba4f0001214b5cbe81a9f984c4d5d698c2a3c3ac907eb4d21d515887	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team